Microsoft Entra SAML Configuration

For Microsoft 365 users, follow the instructions below to register a SAML SSO application in MS Entra:

1. From the Microsoft Entra Admin Center, go to Applications → Enterprise applications → All applications → New application.
    

2. Select Create your own application.
    

3. Enter the following values and click Create.
    
    

   1. Name: CytoTronics Pixel Portal

4. Navigate to Users and groups → Add user/group.
    

5. Under User and groups, click None selected. Select the users or groups who should have access to the Pixel Portal application, then click Assign.
    

6. Navigate to Single sign-on then choose SAML as the single sign-on method.
    

7. Enter the following values in the Basic SAML Configuration section:
    

   1. Identifier: urn:amazon:cognito:sp:us-east-2_XJbEih2L5

   2. Reply URL: https://auth.cytotronics.io/saml2/idpresponse

8. In the SAML Certificates section, copy the App Federation Metadata Url for use in a later step:
    

9. Navigate to Properties → application registration.
    

10. Navigate to Token configuration → Add optional claim.
     

11. Select ID token type, email claim and click Add.
     

12. Email CustomerSupport@cytotronics.com to request that SAML SSO be enabled for your organization. Be sure to include the following details:

    1. The App Federation Metadata URL that you copied previously

    2. For each user that you granted access to the CytoTronics Pixel Portal application, provide the user’s Full Name and Email address.